View Issue Details

IDProjectCategoryView StatusLast Update
0001130Kali LinuxKali Package Bugpublic2014-04-04 14:53
ReporterSpike Assigned Torhertzog  
PrioritynormalSeverityblockReproducibilityalways
Status closedResolutionfixed 
PlatformIntel x86OSKali 1.0.6OS Version1.0.6
Product Version1.0.6 
Fixed in Version1.0.7 
Summary0001130: BeEF 0.4.4.9 authentication page has no "user / password" fields, hence cannot login
Description

Note that this happens ONLY after updating packages (standard repository: deb http://security.kali.org/kali-security kali/updates main contrib non-free)

The issue does NOT show up just after a fresh install from a livecd, before updating packages (not sure what version of beef-xss is present at this point). I tested this at least 3 times.

Steps To Reproduce

Install Kali 1.0.6
apt-get update
apt-get upgrade
start BeEF (via command line or Applications menu)

Additional Information

The reason why the authentication page does not show user / pass fields is because they are supposed to be produced by the following script tag:
<script src="/ui/media/javascript-min/web_ui_auth.js">

However, in the BeEF install, the javascript-min directory is empty:

root@localhost:/usr/share/beef-xss# ls extensions/admin_ui/media/javascript-min/
.
..
readme

The issue therefore is due to a bigger issue: scripts in javascript-min are not generated during beef-xss install

For info:
root@localhost:~# apt-cache show beef-xss
Package: beef-xss
Version: 0.4.4.9-0kali3

Activities

rhertzog

rhertzog

2014-04-04 14:53

administrator   ~0001667

I just uploaded beef-xss_0.4.4.9-0kali4.dsc that should fix this. The permissions of the extensions/admin_ui/media/javascript-min/ directory are now reset on each package update.

Issue History

Date Modified Username Field Change
2014-04-03 15:52 Spike New Issue
2014-04-04 14:53 rhertzog Note Added: 0001667
2014-04-04 14:53 rhertzog Status new => closed
2014-04-04 14:53 rhertzog Assigned To => rhertzog
2014-04-04 14:53 rhertzog Resolution open => fixed
2014-04-04 14:53 rhertzog Fixed in Version => 1.0.7